CVE-2020-19907

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service

published July 12, 2021

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03013 · 87.3th percentile
Published
2021-07-12T19:14Z
EPSS history
Timeline
  • 12 JUL 19:14Z
    A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service
    cvelistv5